I. General information and legal basis
1. Responsible body
ARCH+ Verlag GmbH
Tel: +49 30 34046717 (editorial desk)
Tel: +49 30 34046719 (publishing desk)
HRB 200942 B
Tax no. 201/5944/3519
VAT ID No.: DE 121688728
Managing Directors: Dr. Nikolaus Kuhnert, Anh-Linh Ngo
2. Legal basis for the processing of personal data
The processing of personal data, i.e. all information about personal and factual circumstances of an identified or identifiable person, requires a legal basis:
Where we obtain consent from the data subject for processing personal data, the legal basis is provided by Art. 6(1)(a) GDPR (EU General Data Protection Regulation).
The legal basis for our processing of personal data which are required for the fulfilment of a contract and where the data subject is the contractual party is set forth in Art. 6(1)(b) GDPR. This provision also includes processing which is required for the fulfilment of pre-contractual measures.
Where processing of personal data is required for compliance with a legal obligation to which our organization is subject, the lawful basis is provided by Art. 6(1)(c) GDPR.
If processing is necessary for the purposes of legitimate interests pursued by our organization or by a third party and such legitimate interests override the interests or fundamental rights and freedoms of the data subject, the legal basis is provided by Art. 6(1)(f) GDPR. The legitimate interest of our company in the processing of data within the framework of our online presence lies in the performance of our business activities and in the analysis, optimization, and maintenance of the security of our online offering.
Furthermore, there is an overriding legitimate interest pursuant to Art. 6(1)(f) GDPR, insofar as we process postal contact data for direct marketing and direct sales.
II. Log files
When visiting our website, data will be automatically sent from your browser to our website server. This information is temporarily stored in server log files, based on our legitimate interest in ensuring and improving the stability and functionality of our website and to safeguard the security of our IT systems.
When you use our website we collect the following information:
- Language and version of the browser type used
- The user’s operating system
- Website from which the user’s system accessed our website
- The user’s IP address
- The date and time of access
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Amount of data transferred
- Access status / http status code.
As a rule, we are unable to assign this data to specific persons. This data is not merged with other data sources. The data is deleted after a statistical evaluation within seven (7) days. Data whose further retention is necessary for evidentiary purposes shall be exempt from deletion until the final clarification of the respective incident.
III. Contractual processing
Personal data provided by you in the context of contractual relationships, such as name, address, and email address, will only be used internally to answer your inquiries, process your orders, or provide you with access to certain contractual information.
When you contact us via email or our contact form, your details will be stored by us in order to answer your questions. Personal data are not shared with third parties unless this is justified on the basis of valid data protection regulations or we are legally obligated to do so. Your data will be deleted once we have processed your request or the purpose of storage no longer applies.
V. Prize draws
If you participate in our prize draw and provide your personal data, we will only use it to carry out the prize draw and will delete it afterwards, unless there is a legal exception or you have given your consent for further processing. Winners will be notified directly. If you have given further optional consents for the prize draw, these will be treated separately from the implementation of the prize draw.
- Transient cookies (temporary use)
- Persistent cookies (time-limited use)
- Third-party cookies (from third-party providers)
- Flash cookies (permanent use)
Transient cookies are automatically deleted as soon as you close your browser. These include session cookies in particular, which store a randomly generated session ID, with which various requests by your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website.
Persistent cookies stored on your device are automatically deleted after a specified period of time, which may vary depending on the cookie.
Of course you can also use our website without accepting cookies. You can configure your browser settings according to your wishes, and, for example, refuse to accept third-party cookies or all cookies, or delete cookies already stored. Please note that you may not be able to access all functions of the website if your browser does not allow cookies. This particularly apples to the services behind the paywall.
After you have entered your email address, a confirmation email will be sent to the address you have entered, in which we ask you to confirm that you wish to receive our newsletter. If you do not confirm this, your data will not be included in the distribution list used to dispatch the newsletter. If you confirm your wish to receive the newsletter, your email address will be stored until you unsubscribe from the newsletter. We send newsletters only with your consent or legal permission. The transfer of your personal data to CleverReach serves only the purposes listed here. An exception exists if there is a legal obligation to pass on the data. Please note that when we send out our newsletter, we evaluate your user behavior on the basis of our legitimate interest in improving customer service.
You have the right to withdraw your consent to the storage of your data, your email address, and its use for sending the newsletter at any time. You will find a link to unsubscribe from the newsletter at the end of each newsletter. If you have only subscribed to the newsletter and unsubscribed from it, your personal data will be deleted. Otherwise, only those personal data will be deleted that are not subject to any other processing justification.
Our website offers a registration option. The personal data entered during registration will be transmitted to the responsible body. The data is stored solely for our internal use. When registering, the user’s IP address and the date and time of registration may be stored. This serves to prevent misuse of the services. The data will not be passed on to third parties. An exception exists if there is a legal obligation to pass on the data.
Registration of the data is necessary for the provision of content or services, particularly the online reader as part of a digital upgrade or combination subscription. Registered persons have the option of having their stored data deleted or modified at any time, unless the storage is justified or necessary on the basis of contractual agreements or other legal regulations. Please note that with the deletion of your data you lose access to the content. There is no claim to physical possession of the contents.
IX. Disclosure of data to third parties: contractual purpose (subscriptions)
We pass on data to third parties if this is necessary for the fulfilment of the contract and/or we are legally obliged to do so in individual cases.
1. Subscription orders/orders on account
Subscription orders/orders on account via our webshop are processed by our service partner:
Postfach 70 13 11
Tel: + 49 40 38 6666 – 355
Fax: + 49 40 38 6666 – 299
Your personal data will be used there exclusively for the processing of your subscription order/order on account.
2. Shipping provider
The shipment of physical product orders placed on our webshop is handled by our distribution partner:
Kuvertier-Service Auguste Staar GmbH
Your personal data will be used there exclusively for the processing of your individual order.
3. Use of PayPal as payment method
If you select payment via the online payment service provider PayPal as part of your order process, your contact details will be transmitted to PayPal when you place your order. PayPal is an offer of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the function of an online payment service provider as well as a trustee and offers buyer protection services.
The personal data transmitted to PayPal is data that is required for order processing, as well as data that is related to the order, such as the number of items, item number, and invoice amount. This transmission is necessary to process your order with the payment method you have selected, in particular to confirm your identity, administer your payment, and for the customer relationship.
X. Transfer of data to third parties: Tools for the commercial operation of the website
In part, we use external service providers within the framework of our legitimate interests or your consent with regard to the analysis, optimization, and commercial operation of our online offer. This always presupposes that the third-party providers of this content are aware of the IP address of the user, since without the IP address they would not be able to send the content to the user’s browser. The IP address is therefore required for the display of this content. Third-party vendors may also use pixel tags (invisible graphics, also known as web beacons) for statistical or marketing purposes. The pixel tags can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain, among other things, technical information similar to log files. Below is a list of our service providers.
If your data is to be used for other purposes, we will inform you in advance and only use the data if you have given your express prior consent.
In order to keep the collection of personal data as lean as possible, we currently do not use Google Analytics on our pages.
No social plug-ins from Facebook are currently integrated on our website. We only link to our Facebook page: https://www.facebook.com/archplus/
No social plug-ins from Twitter are currently integrated on our website. We only link to our Twitter page: https://twitter.com/archplusnet
No social plug-ins from Instagram are currently integrated on our website. We only link to our Instagram page: https://instagram.com/archplusnet
Our website uses plug-ins from the Vimeo video portal by Vimeo, LLC, 555 West 18th Street, New York 10011, USA. Each time you visit a page that offers one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. Information about your visit and your IP address is stored there. By interacting with the Vimeo plugins (e.g. clicking the start button), this information is also transmitted to Vimeo and stored there. If you have a Vimeo user account and do not want Vimeo to collect information about you through this website and link to your Vimeo account information, you must log out of Vimeo before visiting this website.
Vimeo uses an iFrame to show videos. This iFrame may connect to Google Analytics. This is Vimeo’s own tracking system, over which we have no control. You can stop this tracking by Google Analytics, and prevent Google from collecting and processing data generated by Google Analytics and relating to your use of our website (including your IP address) by downloading and installing the browser plug-in here: https://tools.google.com/dlpage/gaoptout. [ak1]
Our website uses YouTube. This is a video portal by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as “YouTube”. YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
Through certification in accordance with the EU-US Privacy Shield
Google, and thus also its subsidiary YouTube, ensures that the EU’s data protection requirements are also complied with when processing data in the USA.
We use YouTube in connection with the “Enhanced Privacy Mode” function in order to be able to show you videos. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the “Enhanced Privacy Mode” function ensures that the data described in more detail below is only transmitted to the YouTube server when you actually start a video.
Without this “extended data protection” a connection to the YouTube server in the USA is established as soon as you call up one of our internet pages on which a YouTube video is embedded.
This connection is necessary in order to be able to display the respective video on our website via your browser. In the course of this, YouTube will at least record and process your IP address, the date and time, as well as the website you visited. In addition, a connection is established to the “DoubleClick” advertising network by Google.
If you are logged into YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or change the relevant settings in your YouTube user account.
For the purpose of functionality as well as for the analysis of user behavior, YouTube permanently stores cookies on your device via your browser. If you do not agree with this processing, you have the possibility to prevent cookies from being stored on your device by changing your browser settings. You can find more information on this above under “Cookies”.
Google provides further information on the collection and use of data as well as your rights and protection options in this regard in the data protection notices available at
6. Use of Adobe Typekit
We use external typefaces (fonts) on our website. Adobe Typekit offers the possibility to integrate different fonts directly via an external font database. Adobe Typekit is a service and software provided by Adobe Systems Incorporated, 601 Townsend St., San Francisco, CA 94103 USA. On the Adobe website accessible from Germany, the subsidiary Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland is also identified as responsible for Europe.
The fonts are integrated via a font database from Adobe Typekit. By integrating the fonts, Adobe may collect and process information (including personal data). It cannot be ruled out that Adobe also transmits the information to a server in a third country.
As evidenced by Adobe Systems Incorporated’s Privacy Shield certification (found at https://www.privacyshield.gov/list under the search term “Adobe Systems Incorporated”), Adobe has agreed to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework regarding the collection, use, and retention of personal data from member states of the EU and Switzerland, respectively. Adobe has declared its compliance with the Privacy Shield Principles through certification.
We ourselves cannot influence what data Adobe actually collects and processes. However, Adobe claims to be able to process the following information (including personal data) in particular:
- Provided fonts
- ID of the font
- Type of font (“configurable” or “dynamic” string)
- Account ID (identifies the customer from whom the font is)
- Service that provides the fonts (for example, Typekit or Edge Web Fonts).
- Application that requests the fonts (e.g. Adobe Muse)
- Server that provides the fonts (e.g. Typekit server or Enterprise CDN)
- Host name of the page on which the fonts are loaded
- The time it takes for the web browser to download the fonts
- The time from the download of the fonts with the web browser to the application of the fonts
Whether an ad blocker is installed to determine if the ad blocker is interfering with the proper tracking of page views.
Detailed information can be found at https://www.adobe.com/de/privacy/policies/typekit.html and https://www.adobe.com/de/privacy/policy.html.
If you are signed in to your Adobe account, Adobe can add the processed information to your account.
You can prevent this data from being added directly by logging out of your Adobe account. Furthermore, you can prevent the installation of cookies – insofar as they are set by Adobe – by changing your browser settings. In doing so, however, you might not be able to use all the functions of this website to their full extent.
By integrating Adobe Typekit, we pursue the purpose of being able to display uniform fonts on your device.
The legal basis for the processing of personal data described here is Art. 6(1)(f) GDPR. Our necessary legitimate interest lies in the great benefit offered by a uniform presentation of the fonts. This possibility of uniform font display means considerably less work on our end than if we had to adapt the graphic design of our website to the font standards of multiple different operating systems or browsers. Adobe also has a legitimate interest in the collected (personal) data in order to improve its own services.
7. Matomo (formerly: PIWIK)
We use Matomo (formerly PIWIK) on our website. This is an open-source software that we use to analyze the use of our website. It automatically records your IP address, the pages of our website that you visit, the website from which you accessed our website (referrer URL), the time you spend on our website, and the frequency with which you access our website.
To collect this data, Matomo stores a cookie on your device via your browser. This cookie is valid for one week.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis and optimization of our website.
We use Matomo with the anonymization function “Automatically Anonymize Visitor IPs”. This anonymization function truncates your IP address by two bytes so that it is impossible to assign it to the user.
If you do not agree with this processing, you have the possibility to prevent the cookie from being stored by changing your browser settings. You can find more information on this above under “Cookies”.
In addition, you have the option to terminate the analysis of your usage behavior by way of the so-called “opt-out”.
Please note that if you delete the cookies stored on your device, you will have to click the opt-out button again.
XI. Your rights as a data subject
You have the right at any time to request information about the personal data about you that we have stored. According to the legal provisions, you also have the right to obtain the rectification or erasure of your data. You may also obtain the restriction of processing of your data and object to the processing of your data. Furthermore, you have the right to data portability and to the erasure of your personal data. To do so, please send us an email with the subject “Data Protection”. You also have the right to lodge a complaint with a data protection supervisory authority if you believe that processing of personal data concerning you is in breach of the law.
If you have given your consent, you have the right to revoke your consent at any time. This shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation. You can object at any time to the future processing of your personal data in accordance with the legal requirements. The objection can be made in particular against data processing for purposes of direct advertising.
XII. Duration of data storage
We store personal data for the duration of the respective legal retention period. After this period has expired, the data is routinely deleted, unless it is necessary for the initiation or performance of a contract. If the user’s data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. The data will be blocked accordingly and will not be processed for other purposes. This applies, for example, to user data that must be retained for reasons of commercial or tax law.
XIII. Data security
We make every effort to process your personal data in such a way that the provisions of the data protection laws are complied with by taking all technical and organizational measures to protect this data. Our website and the communication with us via our website is encrypted via HTTPS.
XIV. Online job applications / publication of job advertisements
We offer you the possibility to apply for a job via our website. For your digital application, your application data will be collected and processed electronically by us for the purpose of handling the application process.
The legal basis for this processing is§ 26(1)(1) BDSG in conjunction with Article 88(1) GDPR.
If an employment contract is concluded after the application process, we will store the data you provided during the application in your personnel file for the purposes of the usual organizational and administrative process – naturally in compliance with the more extensive legal obligations.
The legal basis for this processing is also § 26(1)(1) BDSG in conjunction with Article 88(1) GDPR.
In the event of rejection of an application, we will automatically delete the data submitted to us two (2) months after notification of the rejection. However, the data will not be deleted if it is required to be stored for a longer period of up to four (4) months or until the conclusion of legal proceedings due to statutory provisions, e.g. due to the obligation to provide evidence in accordance with the AGG (German General Act on Equal Treatment).
The legal basis in this case is Article 6(1)(f) GDPR and § 24(1)(2) BDSG. Our legitimate interest lies in its legal defense and enforcement.
If you expressly consent to a longer storage of your data, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed on the basis of your consent. The legal basis for this is Article 6(1)(a) GDPR. You can, of course, revoke your consent at any time in accordance with Article 7(3) DSGVO by sending us a written declaration with effect for the future.
XV. Our social media presence
We maintain online presences within social networks, in order to communicate with our customers, prospective customers, and users who are active there and to inform them about our activities and services.
The processing of the personal data of the users active on social media is based on our legitimate interests in communication and the provision of information to and with the users. Insofar as consent to data processing has been given by the user within the framework of the respective social platform, the processing is carried out on the basis of this consent.
Please note that despite our joint responsibility, we do not have full influence on the data processing operations of the social platforms and, if necessary, forward rights requests to the respective operator for better processing of the rights of the data subject. Our options are generally based on the company policy of the respective provider.
Depending on the following named social platform, processing of user data may also take place outside the area of the European Union.
User data is usually processed by the platforms for market research and advertising purposes. For example, usage profiles can be created from user behavior and the interests they reveal. The usage profiles can be used, for example, to place advertisements within and outside the platforms that presumably correspond to the users’ interests. For these purposes, cookies are usually stored on the users’ computers, in which the usage behavior and interests of the users are stored. Data may also be stored in the usage profiles independently of the devices used by the users. This occurs in particular if the users are members of the respective platforms and are logged in to them.
For a detailed description of the respective forms of processing and the options for objecting to these (opt-outs), please refer to the following linked information provided by the operators of the respective networks:
• Facebook (pages, groups)
(Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
This is based on an agreement on joint processing of personal data:
https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
(Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)
(Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
(Vimeo, LLC, 555 West 18th Street, New York 10011, USA)